Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2006-6347

Опубликовано: 07 дек. 2006
Источник: nvd
CVSS2: 6.5
EPSS Низкий

Описание

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:tft_gallery:tft_gallery:*:*:*:*:*:*:*:*

EPSS

Процентиль: 69%
0.00611
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

github
почти 4 года назад

Unrestricted file upload vulnerability in TFT-Gallery allows remote authenticated administrators to upload arbitrary .php files, possibly using admin/index.php. NOTE: this can be leveraged with CVE-2006-1412 to create a remote unauthenticated vector.

EPSS

Процентиль: 69%
0.00611
Низкий

6.5 Medium

CVSS2

Дефекты

NVD-CWE-Other